Commit Graph
860 Commits
Author SHA1 Message Date
Thomas Durieux 61a155fd2e Merge pull request #860 from tdurieux/fix/zip-proxy-errors
fix: abort ZIP responses when the streamer fails
2026-10-07 13:23:26 +02:00
Thomas Durieux dda4160560 Merge pull request #859 from tdurieux/fix/pdf-rendering-build
fix: preserve PDF.js rendering in asset builds
2026-10-07 13:23:23 +02:00
Thomas Durieux a7ae790640 fix: recover renamed repositories by ID and hide archived actions 2026-10-07 11:10:30 +00:00
Thomas Durieux 6c0d335e98 fix: let compressed proxy errors finish flushing 2026-10-07 11:09:04 +00:00
Thomas Durieux 37426d0c48 fix: validate PDF.js syntax before publishing assets 2026-10-07 11:09:03 +00:00
Thomas Durieux 2eff3fcd82 Merge pull request #862 from tdurieux/fix/anonymizer-large-files
perf: index anonymization terms before scanning large files
2026-10-07 13:07:10 +02:00
Thomas Durieux b50e6c4565 perf: index anonymization terms before scanning large files 2026-10-07 10:57:09 +00:00
Thomas Durieux 3140ad3c45 fix: reconnect resources after GitHub App reinstall 2026-10-07 10:34:55 +00:00
Thomas Durieux f32b2c6eb7 fix: abort ZIP responses when the streamer fails 2026-10-07 10:34:43 +00:00
Thomas Durieux b72631bbbe fix: preserve PDF.js rendering in asset builds 2026-10-07 10:34:33 +00:00
Thomas Durieux 2fb4b8fabd Merge pull request #852 from tdurieux/fix/reconnect-recreated-repository
fix: reconnect anonymizations to recreated source repositories
2026-09-30 07:02:44 +02:00
Thomas Durieux d28799f234 fix: reconnect anonymizations to recreated source repositories 2026-09-29 23:09:51 +00:00
Thomas Durieux d909bf281b Exchange owner consent codes for immutable pending bindings 2026-09-27 15:06:14 +00:00
Thomas Durieux e4334bc9a7 Add isolated artifact owner consent page 2026-09-27 14:56:06 +00:00
Thomas Durieux 7b60979c96 Protect artifact consent HTTP requests with current sessions and CSRF 2026-09-27 14:36:46 +00:00
Thomas Durieux 5485f57e02 Retain session-bound artifact owner consent under current authority 2026-09-27 14:16:57 +00:00
Thomas Durieux b776ff7e5a Add bounded authenticated review intent HTTPS consumer 2026-09-27 13:50:20 +00:00
Thomas Durieux 83e8d45192 fix: close rejected artifact service requests before body draining 2026-09-27 13:13:04 +00:00
Thomas Durieux 31dfe0f604 Record clean-install upstream build and full test results 2026-09-27 13:03:02 +00:00
Thomas Durieux eaa84e3af5 Add optional authenticated review-service capabilities endpoint 2026-09-27 12:51:28 +00:00
Thomas Durieux c5fe95ea0e Merge pull request #842 from tdurieux/fix/repository-refresh-concurrency
fix: serialize repository refreshes and recover stale downloads
2026-09-27 08:45:15 +02:00
Thomas Durieux 083544bf68 fix: preserve active downloads and atomically prepare refreshed snapshots 2026-09-27 06:41:39 +00:00
Thomas Durieux 0002e8d1a1 fix: serialize repository refreshes and recover stale downloads 2026-09-27 06:34:05 +00:00
Thomas Durieux 3c41a00137 Merge pull request #841 from tdurieux/fix/repository-refresh-feedback
fix: report repository refresh failures and reject busy updates
2026-09-27 08:18:18 +02:00
Thomas Durieux 9c95cfb463 build: include refreshed dashboard assets 2026-09-27 06:17:04 +00:00
Thomas Durieux 7ada28f9e3 fix: report repository refresh failures and reject busy updates 2026-09-27 06:09:19 +00:00
Thomas Durieux c65dccd837 Merge pull request #835 from tdurieux/codex/fix-large-notebook-downloads
fix: prevent large notebook download timeouts
2026-09-23 06:00:09 +02:00
tdurieux 0e7a8899b5 fix: prevent large notebook download timeouts 2026-09-23 11:27:17 +08:00
Thomas Durieux 4eba5072ca Merge pull request #833 from tdurieux/fix/hashed-asset-path-traversal
fix: prevent path traversal through hashed asset routes
2026-09-15 22:29:58 +02:00
Thomas Durieux 383dad7e20 fix: prevent path traversal through hashed asset routes 2026-09-15 20:26:42 +00:00
Thomas Durieux 48af564ed5 Merge pull request #832 from tdurieux/fix/streamer-public-repository-context
fix: restore public file streaming and contain ZIP failures
2026-09-14 17:37:51 +02:00
Thomas Durieux 2e6b79b30d fix: address streamer review edge cases 2026-09-14 15:23:13 +00:00
Thomas Durieux c9c729c2c5 fix: restore public file streaming and contain ZIP failures 2026-09-14 15:06:29 +00:00
Thomas Durieux ecba15ce2e Merge pull request #831 from tdurieux/codex/test-repository-pages-access
fix: read public repositories without scoped App token minting
2026-09-14 16:55:12 +02:00
tdurieux 2d153dd353 fix: read public repositories without scoped App token minting 2026-09-14 16:50:18 +02:00
tdurieux 8b9f79502b test: cover repository loading with restricted Pages settings 2026-09-14 16:44:53 +02:00
Thomas Durieux cfb49002ae Merge pull request #830 from tdurieux/fix/legacy-hashbang-repository-urls
fix: restore legacy hashbang repository links
2026-09-14 16:37:19 +02:00
Thomas Durieux 5f44cad855 ci: build frontend assets before running tests 2026-09-14 14:35:17 +00:00
Thomas Durieux 878dda1d37 fix: restore legacy hashbang repository links 2026-09-14 14:32:00 +00:00
Thomas Durieux 8abdaf7119 Merge pull request #828 from tdurieux/fix/public-repository-app-access
fix: allow GitHub App access to public repositories without installation
2026-09-13 19:06:25 +02:00
Thomas Durieux 0ea5f778af Merge pull request #827 from tdurieux/fix/repository-activity-dates
fix: distinguish repository publication and settings dates
2026-09-13 19:06:23 +02:00
Thomas Durieux dc026e2ee8 fix: revalidate scoped public tokens throughout repository reads 2026-09-13 15:16:45 +00:00
Thomas Durieux 5e5cc6e0c2 fix: renew public grants and verify source identity and visibility 2026-09-13 15:05:43 +00:00
Thomas Durieux 8efb9bd506 fix: allow GitHub App access to public repositories without installation 2026-09-13 08:42:55 +00:00
Thomas Durieux 7cdf0f5e8d fix: distinguish repository publication and settings dates 2026-09-13 08:42:54 +00:00
Thomas Durieux 22096a8346 Merge pull request #815 from tdurieux/dependabot/npm_and_yarn/smol-toml-1.8.0
chore(deps-dev): bump smol-toml from 1.6.1 to 1.8.0
2026-09-10 19:31:24 +02:00
Thomas Durieux be41136ea0 Merge pull request #824 from tdurieux/codex/unified-github-signin
feat: unify GitHub sign-in and connect OAuth for gists
2026-09-10 09:22:28 -07:00
tdurieux 99a50cad7b feat: unify GitHub sign-in and connect OAuth for gists 2026-09-10 18:20:56 +02:00
Thomas Durieux 82510628f7 Merge pull request #823 from tdurieux/codex/fix-anonymize-access-height
fix: keep GitHub access controls beside the source URL
2026-09-10 09:06:25 -07:00
tdurieux 68d9c54fcf fix: keep GitHub access controls beside the source URL 2026-09-10 18:04:56 +02:00